Skip to content

gomod(deps): Bump the go-deps group across 1 directory with 12 updates - #473

Open
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-40ce93a414
Open

gomod(deps): Bump the go-deps group across 1 directory with 12 updates#473
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-40ce93a414

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 10 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.2.1
github.com/containerd/containerd/v2 2.3.0 2.3.4
github.com/containerd/platforms 1.0.0-rc.4 1.0.0-rc.5
github.com/docker/cli 29.4.2+incompatible 29.7.2+incompatible
github.com/moby/buildkit 0.29.0 0.32.2
github.com/moby/moby/client 0.4.1 0.5.1
github.com/posthog/posthog-go 1.12.4 1.24.3
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/tidwall/gjson 1.18.0 1.19.0
golang.org/x/mod 0.38.0 0.40.0

Updates charm.land/bubbles/v2 from 2.1.0 to 2.2.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.2.1

Tiny Monday bugfix

Textarea element had a bug, where you used to be able to go 1 word backwards, even if there was nothing, which resulted in the whole TUI freezing. It was now fixed by @​OxQuasar!

Changelog

Fixed

  • f6134114d735cf40e95c15ff62e7359e46d04fc9: fix(textarea): stop word-left at input boundary (#1036) (@​OxQuasar)

Docs

  • 87d445838781700cb25e3fc3a6b26006eab97b41: docs: update godoc link in readme to new package (@​meowgorithm)

Other stuff

  • 10489b5fafe92bfaea873297cab8ac8b5c5237f4: readme: drop tree section for now (@​meowgorithm)
  • 490948109eb4731927ba2f4cd464d8175a9630d7: v2.2.1 (@​andrinoff)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.2.0

A new Bubble and some new Textarea stuff

There are a couple nice features in today's release. Let's check em out!

If a tree falls in the forest…

At last, the tree Bubble from all star contributor @​dlvhdr’s is here! He built it for DiffNav and graciously contributed to Bubbles. We've been working with Dolev for a long time and were totally stoked when he offerd to contribute.

Select all, ctrl+c, ctrl+v…done!

Our own @​andrinoff added a bunch of awesome stuff to Textarea, including the long awaited text selection. Select, copy, and cut your way into mini text editing.

For more info see the docs.

And special thanks to @​zoriya for adding ctrl+left/right bindings.

xoxo, Charm! 💌

Changelog

New!

  • 8cea431500a8837c241cbe8ad71601aa8f00a0d9: feat(textarea): support ctrl + left/right/backspace (#1020) (@​zoriya)
  • 037ad37bb0aa6e8ec544df6d3af752755f0a72d9: feat: textarea selection (#1029) (@​andrinoff)
  • e97af08ee293131e7b71f7e3006c06a81a2584b8: feat: tree bubble (#893) (@​dlvhdr)

... (truncated)

Commits

Updates charm.land/bubbletea/v2 from 2.0.6 to 2.0.8

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.8

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

  • db569adcb41d0eae251587e6a5f0cc3c7d77e8eb: fix(deps): bump ultraviolet for emoji-related rendering improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.7

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

  • @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
  • @​lawrence3699 fixed a panic that could happen when input's not available
  • We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

  • c60f0c53042238305ec13b486326588f12aea0ec: fix: prevent data race with cursedRenderer.onMouse (#1691) (@​lrstanley)
  • 074596e14e2f5ca5e3986ee72e7c08f1569c4178: fix: skip input reader restore when input is disabled (#1680) (@​lawrence3699)
  • 878d7df2f2b02f3ca8db177fa8553834bc35ea7c: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • fc707bb chore(examples): go mod tidy
  • db569ad chore(deps): bump ultraviolet for emoji-related rendering fixes
  • a23da80 v2.0.7
  • 670963e chore(task): add release and fetch-tags tasks
  • 29c4c32 fix(examples/deps): go mod tidy
  • 878d7df chore(deps): bump ultraviolet for kitty keyboard fix
  • c60f0c5 fix: prevent data race with cursedRenderer.onMouse (#1691)
  • 640d879 docs(readme): update footer image
  • 0fbefd2 chore: remove CODEOWNERS
  • 074596e fix: skip input reader restore when input is disabled (#1680)
  • See full diff in compare view

Updates github.com/containerd/containerd/v2 from 2.3.0 to 2.3.4

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.3.4

Welcome to the v2.3.4 release of containerd!

The fourth patch release for containerd 2.3 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)
  • Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI (#13914)
  • Deprecate checkpoint restore in CreateContainer (#13868)
  • Support non-UTF-8 binary environment variable values in CRI (#13454)
  • Enable OCI runtime feature introspection for non-runc runtimes in CRI (#13778)
  • Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#13734)
  • Normalize sandbox image references in CRI to resolve images without domain prefixes (#13759)

Node Resource Interface (NRI)

  • Emit deprecation warnings for plugins using deprecated NRI interfaces (#13935)

Runtime

  • Enable log scrubbing by default on Windows (#13904)
  • Fix memory leak in OOM watcher map when stopping container monitoring (#13870)
  • Avoid orphaning shims on transient errors when loading process IDs (#13857)
  • Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming (#13803)

Snapshotters

  • Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata (#13876)

Breaking

  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)

Deprecations

  • Deprecate checkpoint restore in CreateContainer (#13868)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Maksym Pavlenko
  • Mike Brown
  • Akihiro Suda
  • Derek McGowan

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Since containerd v2.3 in April 2026, minor releases are provided on a time basis with a cadence of 4 months. New minor releases are scheduled for April, August, and December of each year. This cadence is synchronized with the Kubernetes release schedule to ensure that new features in containerd can be smoothly adopted by new Kubernetes releases.

The maintainers will maintain a roadmap and milestones for each release, however,

... (truncated)

Commits
  • db88095 Merge pull request #13942 from samuelkarp/prepare-release-2.3.4
  • 6c13edd Merge pull request #13945 from erofs/erofs-fix-backport
  • 3aef405 snapshots/erofs: protect snapshot staging from cleanup
  • c1f5360 Prepare release notes for v2.3.4
  • a553459 Merge pull request #13913 from samuelkarp/toggle-experimental-criu-restore-2.3
  • d79eeb2 Merge pull request #13935 from k8s-infra-cherrypick-robot/cherry-pick-13916-t...
  • 5966e2e nri,deprecation: emit warnings for old NRI plugins.
  • 14b5e7d Merge pull request #13914 from k8s-infra-cherrypick-robot/cherry-pick-13162-t...
  • ab52c58 Set the default of runtimeFeatures.UserNamespacesHostNetwork to true
  • 928c03c cri: disable restore in CreateContainer by default
  • Additional commits viewable in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc.5

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.5

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5

Commits

Updates github.com/docker/cli from 29.4.2+incompatible to 29.7.2+incompatible

Commits
  • a7dcaa6 Merge pull request #7151 from vvoland/update-archive
  • 400b45f vendor: github.com/moby/go-archive v0.3.3
  • 38887ec Merge pull request #7145 from winklemad/fix-service-duplicate-removal-panic
  • 904aef7 Merge pull request #7147 from docker/dependabot/github_actions/docker-actions...
  • f08e60e build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • abfd891 Merge pull request #7149 from vvoland/update-docker
  • 519eb45 VERSION: 29.7.2
  • 8717af7 cli/command/service: fix panic when removing duplicate values
  • e9452d6 Merge pull request #7142 from thaJeztah/bump_go_archive_0.3.2
  • a6014a7 vendor: github.com/moby/go-archive v0.3.2
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.29.0 to 0.32.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

v0.32.1

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Fix archive extraction through implied parent directories and absolute symlinks. #7005
  • Fix OCI artifact attestation pushes to registries that strictly validate subject references. #7012

Dependency Changes

  • github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Welcome to the v0.32.0 release of buildkit!

... (truncated)

Commits
  • 991535e Merge pull request #7016 from crazy-max/v0.32_backport_7015
  • b4e609f exporter: revert attestation manifest push order
  • f1697c4 Merge pull request #7013 from crazy-max/v0.32-backport-7012
  • c300afc exporter: fix attestation manifest push order
  • 68bcd7d Merge pull request #7006 from crazy-max/v0.32-pick-0.32.1
  • 640eb23 dockerfile: test ADD hardlinks through absolute symlinks
  • c7dc8c8 dockerfile: regression test for ADD archives through absolute symlinks
  • f3b57e4 dockerfile: regression test for ADD archives with implied parents
  • 5f3d92c Revert "vendor: github.com/moby/go-archive v0.2.1"
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016

client/0.5.0

0.5.0

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

  • API: Docker client now sets useragent (RFC 2616)
  • Runtime: Add ps args to docker top
  • Runtime: Add support for container ID files (pidfile like)
  • Runtime: Add container=lxc in default env
  • Runtime: Support networkless containers with docker run -n and docker -d -b=none
  • API: Add /events endpoint
  • Builder: ADD command now understands URLs
  • Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
  • Hack: Simplify unit tests with helpers
  • Hack: Improve docker.upstart event
  • Hack: Add coverage testing into docker-ci
  • Runtime: Stdout/stderr logs are now stored in the same file as JSON
  • Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
  • Runtime: Change .dockercfg format to json and support multiple auth remote
  • Runtime: Do not override volumes from config
  • Runtime: Fix issue with EXPOSE override
  • Builder: Create directories with 755 instead of 700 within ADD instruction

0.5.0 (2013-07-17)

  • Runtime: List all processes running inside a container with 'docker top'
  • Runtime: Host directories can be mounted as volumes with 'docker run -v'
  • Runtime: Containers can expose public UDP ports (eg, '-p 123/udp')
  • Runtime: Optionally specify an exact public port (eg. '-p 80:4500')
  • Registry: New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries
  • Builder: ENTRYPOINT instruction sets a default binary entry point to a container
  • Builder: VOLUME instruction marks a part of the container as persistent data
  • Builder: 'docker build' displays the full output of a build by default
  • Runtime: 'docker login' supports additional options
  • Runtime: Dont save a container's hostname when committing an image.
  • Registry: Fix issues when uploading images to a private registry

0.4.8 (2013-07-01)

  • Builder: New build operation ENTRYPOINT adds an executable entry point to the container.
  • Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID.
  • Tests: Fix issues in the test suite

0.4.7 (2013-06-28)

  • Registry: easier push/pull to a custom registry
  • Remote API: the progress bar updates faster when downloading and uploading large files
  • Remote API: fix a bug in the optional unix socket transport
  • Runtime: improve detection of kernel version
  • Runtime: host directories can be mounted as volumes with 'docker run -b'
  • Runtime: fix an issue when only attaching to stdin
  • Runtime: use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts
  • Hack: improve test suite and dev environment
  • Hack: remove dependency on unit tests on 'os/user'
  • Documentation: add terminology section

0.4.6 (2013-06-22)

... (truncated)

Commits

Updates github.com/posthog/posthog-go from 1.12.4 to 1.24.3

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.24.3

Unreleased

1.24.2

Unreleased

1.24.1

Unreleased

1.24.0

Unreleased

1.23.1

Unreleased

1.23.0

Unreleased

1.22.0

Unreleased

1.21.0

Unreleased

1.20.0

Unreleased

1.19.0

Unreleased

1.18.0

Unreleased

1.17.5

Unreleased

1.17.4

Unreleased

1.17.3

Unreleased

1.17.2

Unreleased

1.17.1

Unreleased

1.17.0

Unreleased

... (truncated)

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.24.3

Patch Changes

  • 749f1e8: Fix exact/is_not local flag evaluation to match case-insensitively and after string coercion, consistent with the other string operators here and the reference SDKs. A plain Go == made them case- and type-sensitive, so e.g. exact "US" did not match a "us" property value and exact 1 did not match a "1" property value.

1.24.2

Patch Changes

  • 360bc8d: Align local is_set and is_not_set evaluation with partial property context.

1.24.1

Patch Changes

  • 3d250c5: Return an empty feature flag snapshot without evaluating flags when FlagKeys is an explicit empty slice.

1.24.0

Minor Changes

  • 150f03e: Fall back to /flags when a requested flag is missing from loaded local definitions. This changes the earlier behavior where the key was omitted without a request.

1.23.1

Patch Changes

  • ec8f6c0: Normalize event timestamps to the equivalent UTC instant before serializing legacy batch and Capture V1 payloads.

1.23.0

Minor Changes

  • 941d9ca: Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation.

1.22.0

Minor Changes

  • f102f70: Error tracking stack traces now support server-side symbolication. When the running executable's identity can be determined (GNU build id on Linux, LC_UUID on macOS), the default extractor emits frames with raw instruction addresses and client-expanded inline groups, and exceptions carry a $debug_images property, so PostHog can re-symbolicate against debug symbols uploaded with posthog-cli symbol-sets upload — including exact inline expansion and source context. Without uploaded symbols the runtime-resolved frames are kept as-is, and when the executable can't be identified the frames keep their previous plain shape.

    Requires a PostHog backend with grouped inline frame support (PostHog Cloud, or self-hosted ≥ July 2026). Older backends resolve each group member independently, which duplicates inline expansions when debug symbols are uploaded. To keep the previous plain frames, use a custom StackTraceExtractor.

1.21.0

Minor Changes

  • 9e9ad63: Send minimal $feature_flag_called events when the server enables it. When the /flags?v=2 response carries minimalFlagCalledEvents: true (remote evaluation) or the local-evaluation definitions payload carries minimal_flag_called_events: true, and the evaluated flag has has_experiment: false, the event keeps only a strict allowlist of evaluation properties ($feature_flag, $feature_flag_response, $feature_flag_has_experiment, $feature_flag_id, $feature_flag_version, $feature_flag_reason, $feature_flag_request_id, $feature_flag_evaluated_at, $feature_flag_error, locally_evaluated, $groups, $process_person_profile, $geoip_disable, $is_server, $session_id, $window_id, $device_id, $lib, $lib_version) plus static system context ($os, $os_version, $os_distro, $go_version); everything else — including Config.DefaultEventProperties and the snapshot path's $feature/<key> and $feature_flag_payload — is stripped. Any missing signal (gate absent, has_experiment unknown, experiment-linked flag, legacy response shapes) keeps today's full event shape. The gate is server-controlled per project; no SDK configuration is added.

... (truncated)

Commits
  • 0b4046e chore: release v1.24.3 [version bump] [skip ci]
  • 749f1e8 fix: match exact/is_not case-insensitively and after string coercion (#299)
  • 5e7fa98 chore: release v1.24.2 [version bump] [skip ci]
  • 360bc8d fix(flags): align presence operator semantics (#297)
  • 5cfdbb4 chore: release v1.24.1 [version bump] [skip ci]
  • 3d250c5 fix(flags): handle empty evaluation key scopes (#295)
  • d9a2e6a refactor: unify property group evaluation paths (#291)
  • cb81811 ci: update flags project board workflow (#294)
  • 2eaba71 chore: release v1.24.0 [version bump] [skip ci]
  • 35100f0 fix(release): gate released Slack notification on an actual release (#293)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used

... (truncated)

Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates github.com/tidwall/gjson from 1.18.0 to 1.19.0

Commits

Updates golang.org/x/mod from 0.38.0 to 0.40.0

Commits
  • d3398d0 go.mod: update golang.org/x dependencies
  • 57549bf sumdb: ignore unrelated hashes in Lookup
  • 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
  • 13be902 go.mod: update golang.org/x dependencies
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 23, 2026
@dependabot
gomod(deps): Bump the go-deps group across 1 directory with 12 updates
9f77062 
Bumps the go-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.2.1` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.0` | `2.3.4` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.4` | `1.0.0-rc.5` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.2+incompatible` | `29.7.2+incompatible` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.29.0` | `0.32.2` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.5.1` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.12.4` | `1.24.3` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.40.0` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.2.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.2.1)

Updates `charm.land/bubbletea/v2` from 2.0.6 to 2.0.8
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.6...v2.0.8)

Updates `github.com/containerd/containerd/v2` from 2.3.0 to 2.3.4
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/v2.3.4/RELEASES.md)
- [Commits](containerd/containerd@v2.3.0...v2.3.4)

Updates `github.com/containerd/platforms` from 1.0.0-rc.4 to 1.0.0-rc.5
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5)

Updates `github.com/docker/cli` from 29.4.2+incompatible to 29.7.2+incompatible
- [Commits](docker/cli@v29.4.2...v29.7.2)

Updates `github.com/moby/buildkit` from 0.29.0 to 0.32.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.29.0...v0.32.2)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.5.1)

Updates `github.com/posthog/posthog-go` from 1.12.4 to 1.24.3
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.12.4...v1.24.3)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0
- [Commits](tidwall/gjson@v1.18.0...v1.19.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.40.0
- [Commits](golang/mod@v0.38.0...v0.40.0)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/docker/cli
  dependency-version: 29.7.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/prod-staging/go-deps-40ce93a414 branch from 76f685b to 9f77062 Compare August 30, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants